mixdog 0.9.172 → 0.9.174

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mixdog",
-  "version": "0.9.172",
+  "version": "0.9.174",
   "private": false,
   "type": "module",
   "description": "Standalone mixdog coding-agent CLI/TUI workspace.",
@@ -74,11 +74,11 @@
     "test:release-assets": "node --check scripts/verify-release-assets.mjs && node --check scripts/release-gate-test.mjs && node --check scripts/prepare-native-assets.mjs && node --test scripts/release-gate-test.mjs scripts/prepare-native-assets-test.mjs scripts/generate-voice-runtime-manifest.test.mjs",
     "test:native-edit-wire": "node scripts/native-edit-wire-test.mjs",
     "test:release-critical": "npm run test:release-assets && npm run smoke:patch && npm run test:providers",
-    "test:spec-advisory": "node scripts/advisory-spec-test.mjs && npm run test:spec-advisory --prefix apps/desktop",
+    "test:spec-advisory": "node scripts/run-advisory-spec.mjs && npm run test:spec-advisory --prefix apps/desktop",
     "test:session-transport": "node --test \"scripts/session-transport/*.test.mjs\" scripts/daemon-bootstrap-test.mjs src/runtime/shared/child-spawn-remote.test.mjs src/standalone/session-runtime-agent-control-client.test.mjs src/standalone/session-runtime-dispatch-cancel.test.mjs src/standalone/session-runtime-host-factory.test.mjs src/standalone/session-runtime-inline-host.test.mjs src/standalone/session-runtime-provider-cooldown.test.mjs src/standalone/session-runtime-shard-host.test.mjs src/standalone/session-runtime-shard-router.test.mjs",
-    "test:session": "node --test scripts/runtime-turn-contract-test.mjs scripts/session-save-fault-store-test.mjs scripts/turn-review-revert-test.mjs src/runtime/shared/tool-surface.test.mjs src/runtime/bridge-clients.test.mjs src/runtime/browser-bridge/action-schema.test.mjs src/runtime/computer-bridge/client-semantic-error.test.mjs src/runtime/agent/orchestrator/session/tool-envelope.test.mjs src/runtime/agent/orchestrator/session/eager-dispatch.test.mjs",
+    "test:session": "node --test scripts/runtime-turn-contract-test.mjs scripts/session-save-fault-store.slow.test.mjs scripts/turn-review-revert.slow.test.mjs src/runtime/shared/tool-surface.test.mjs src/runtime/bridge-clients.test.mjs src/runtime/browser-bridge/action-schema.test.mjs src/runtime/computer-bridge/client-semantic-error.test.mjs src/runtime/agent/orchestrator/session/tool-envelope.test.mjs src/runtime/agent/orchestrator/session/eager-dispatch.test.mjs",
     "test:quick": "npm run test:session && npm run test:session-transport && npm run test:desktop-main --prefix apps/desktop",
-    "test:office": "node --test scripts/run-office-live-tests.test.mjs src/runtime/office/office-runtime-contract.test.mjs src/runtime/office/office-runtime-com.test.mjs src/runtime/office/office-runtime-portable.test.mjs src/runtime/office/xlsx-formula-audit.test.mjs src/runtime/office/xlsx-portable-snapshot.test.mjs src/runtime/office/office-runtime-pdf.test.mjs src/runtime/office/office-runtime-design.test.mjs src/runtime/office/office-assurance.test.mjs src/runtime/office/office-design-aesthetics.test.mjs src/runtime/office/portable-authoring.test.mjs src/runtime/office/slide-quality.test.mjs src/runtime/office/authoring/pptx-brief.test.mjs src/runtime/office/authoring/pptx-receipt.test.mjs src/runtime/office/quality/render-air.test.mjs src/runtime/office/quality/pptx-deck-rubric.test.mjs && npm run test:office-approval --prefix apps/desktop",
+    "test:office": "node --test scripts/run-office-live-tests.test.mjs src/runtime/office/office-runtime-contract.test.mjs src/runtime/office/office-runtime-com.test.mjs src/runtime/office/office-runtime-portable.slow.test.mjs src/runtime/office/xlsx-formula-audit.test.mjs src/runtime/office/xlsx-portable-snapshot.test.mjs src/runtime/office/office-runtime-pdf.slow.test.mjs src/runtime/office/office-runtime-design.test.mjs src/runtime/office/office-assurance.slow.test.mjs src/runtime/office/office-design-aesthetics.test.mjs src/runtime/office/portable-authoring.slow.test.mjs src/runtime/office/slide-quality.test.mjs src/runtime/office/authoring/pptx-brief.test.mjs src/runtime/office/authoring/pptx-receipt.test.mjs src/runtime/office/quality/render-air.test.mjs src/runtime/office/quality/pptx-deck-rubric.test.mjs && npm run test:office-approval --prefix apps/desktop",
     "test:office:live": "node scripts/run-office-live-tests.mjs",
     "test:office:preview": "node --test src/runtime/office/office-render-preview.test.mjs",
     "test:office:review": "node --test src/runtime/office/pptx-independent-review.test.mjs src/runtime/office/pptx-chart-styling.test.mjs",

package/scripts/build-tui.mjs

@@ -7,13 +7,14 @@
  * ESM bundle at src/tui/dist/index.mjs.
  *
  * What is bundled vs external:
- *   - bundled: our JSX only.
- *   - external: React and Mixdog's patched Ink runtime dependency.
+ *   - bundled: our JSX and the local modules it imports, plus Mixdog's patched
+ *     Ink with its whole dependency tree (see bundleInkPlugin).
+ *   - external: React and every package our own code imports.
  *
  * Run:  node scripts/build-tui.mjs   (or `npm run build:tui`)
  */
 import { build } from 'esbuild';
-import { dirname, join } from 'node:path';
+import { dirname, isAbsolute, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
@@ -41,6 +42,30 @@ const sessionClientExternalPlugin = {
   },
 };
 
+// Ink's ESM build is ~500 small files (es-toolkit alone is ~430), and loading
+// them one by one cost ~150 ms of every TUI start, so Ink and everything it
+// imports are bundled. React stays external so Ink's reconciler and our
+// components share one React instance; packages our own code imports stay
+// external. Ink's optional React DevTools bridge (DEV=true) is left out: it
+// would pull ws and the uninstalled react-devtools-core into the bundle.
+const bundleInkPlugin = {
+  name: 'mixdog-bundle-ink',
+  setup(build) {
+    build.onResolve({ filter: /^[^./]/ }, ({ path, importer, kind }) => {
+      if (kind === 'entry-point' || isAbsolute(path)) return undefined;
+      if (path === 'react' || path.startsWith('react/')) return { path, external: true };
+      if (path === 'ink' || /[\\/]node_modules[\\/]/.test(importer)) return undefined;
+      return { path, external: true };
+    });
+    build.onResolve({ filter: /^\.\/devtools\.js$/ }, ({ importer }) =>
+      /[\\/]node_modules[\\/]ink[\\/]/.test(importer)
+        ? { path: 'ink-devtools', namespace: 'mixdog-omitted' }
+        : undefined
+    );
+    build.onLoad({ filter: /.*/, namespace: 'mixdog-omitted' }, () => ({ contents: '' }));
+  },
+};
+
 await build({
   entryPoints: [join(SRC, 'index.jsx')],
   outfile: join(SRC, 'dist', 'index.mjs'),
@@ -49,11 +74,9 @@ await build({
   platform: 'node',
   target: 'node22',
   jsx: 'automatic',
-  // Keep package imports external like the original CLI flow. Local shared
-  // helpers are bundled so relative paths stay valid from src/tui/dist/.
-  // Process shutdown stays external so the CLI and checked-in TUI bundle use
-  // the same process-global lifecycle state.
-  packages: 'external',
+  // Local shared helpers are bundled so relative paths stay valid from
+  // src/tui/dist/. Process shutdown stays external so the CLI and checked-in
+  // TUI bundle use the same process-global lifecycle state.
   // Bundled CJS helpers (e.g. src/lib/mixdog-debug.cjs) compile to esbuild's
   // __require shim, which throws "Dynamic require of ..." in plain ESM.
   // Provide a real module-scope require so those requires resolve at runtime.
@@ -73,7 +96,7 @@ await build({
     '../../runtime/channels/lib/voice-runtime-fetcher.mjs',
     '../../runtime/channels/lib/whisper-server.mjs',
   ],
-  plugins: [sharedRuntimeExternalPlugin, sessionClientExternalPlugin],
+  plugins: [sharedRuntimeExternalPlugin, sessionClientExternalPlugin, bundleInkPlugin],
   logLevel: 'info',
 });
 

package/scripts/code-graph-description-contract.mjs

@@ -20,8 +20,7 @@ const includesTerm = (text, term) => {
 const includesAll = (text, terms) => terms.every((term) => includesTerm(text, term));
 const hasPositiveClause = (text, terms) =>
   clauses(text).some((clause) => !NEGATION.test(clause) && includesAll(clause, terms));
-const hasModeClause = (text, label, modes, target = null) =>
-  hasPositiveClause(text, [label, ...modes, ...(target ? [target] : [])]);
+const hasModeClause = (text, label, modes) => hasPositiveClause(text, [label, ...modes]);
 const hasContradictoryTargetAssignment = (text) =>
   hasPositiveClause(text, [...FILE_MODES, 'symbols[]']) || hasPositiveClause(text, [...SYMBOL_MODES, 'files[]']);
 const removeIdentifier = (text, identifier) =>

package/scripts/computer-task-cost-report.mjs

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { dirname, resolve } from 'node:path';
+import { percentile, sortedFinite } from './lib/trace-stats.mjs';
 
 function arg(name, fallback) {
   const prefix = `--${name}=`;
@@ -14,23 +15,15 @@ function load(path) {
   return JSON.parse(readFileSync(resolve(path), 'utf8'));
 }
 
-function percentile(values, fraction) {
-  const sorted = values
-    .map(Number)
-    .filter(Number.isFinite)
-    .sort((a, b) => a - b);
-  if (sorted.length === 0) return 0;
-  return sorted[Math.max(0, Math.ceil(sorted.length * fraction) - 1)];
-}
-
 function fixed(value, digits = 2) {
   return Number(Number(value || 0).toFixed(digits));
 }
 
 function distribution(values) {
+  const sorted = sortedFinite(values.map(Number));
   return {
-    p50: percentile(values, 0.5),
-    p95: percentile(values, 0.95),
+    p50: percentile(sorted, 50),
+    p95: percentile(sorted, 95),
   };
 }
 

package/scripts/context-renewal-live-check.mjs

@@ -58,7 +58,7 @@ if (child) {
     console.error(`${spec.name}: ${error.message}`);
     process.exitCode = 1;
   } finally {
-    await runtime?.stop?.('context-renewal-live-check');
+    await runtime?.close('context-renewal-live-check');
   }
   process.exit(process.exitCode || 0);
 }

package/scripts/coverage-query.mjs

@@ -0,0 +1,27 @@
+#!/usr/bin/env node
+// Ask the artifact written by `node scripts/test.mjs --coverage` whether the
+// suite executed the function a line belongs to. A file that changed since the
+// collection answers STALE instead of a verdict nobody should act on.
+//
+// Usage: node scripts/coverage-query.mjs <file> <line>
+//        node scripts/coverage-query.mjs --status
+import { relative, resolve } from 'node:path';
+import {
+  coverageStaleness,
+  formatCoverageAnswer,
+  formatStaleness,
+  loadCoverageArtifact,
+  queryCoverage,
+} from './lib/coverage.mjs';
+
+const [file, line] = process.argv.slice(2);
+if (file === '--status') {
+  console.log(formatStaleness(await coverageStaleness(await loadCoverageArtifact())));
+} else if (!file || !/^\d+$/.test(line ?? '')) {
+  console.error('usage: node scripts/coverage-query.mjs <file> <line> | --status');
+  process.exitCode = 1;
+} else {
+  const artifact = await loadCoverageArtifact();
+  const path = relative(process.cwd(), resolve(process.cwd(), file));
+  console.log(formatCoverageAnswer(await queryCoverage(artifact, path, Number(line))));
+}

package/scripts/generate-runtime-manifest.mjs

@@ -46,7 +46,6 @@ try {
 
 const { assets } = JSON.parse(assetsJson);
 
-// Filter tarball assets
 const tarballs = assets.filter((a) => /^mixdog-runtime-.+\.tar\.gz$/.test(a.name));
 console.log(
   `Found ${tarballs.length} tarball(s):`,
@@ -65,27 +64,24 @@ if (tarballs.length === 0) {
 const PG_RE = /pg(\d+)\.(\d+)/;
 const VEC_RE = /pgvector(\d+(?:\.\d+)+)/;
 
-let pgMajor = 16,
-  pgMinor = 4,
-  pgvectorVersion = '0.7.4';
-for (const t of tarballs) {
-  const pgM = PG_RE.exec(t.name);
-  const vM = VEC_RE.exec(t.name);
-  if (pgM) {
-    pgMajor = parseInt(pgM[1], 10);
-    pgMinor = parseInt(pgM[2], 10);
-  }
-  if (vM) {
-    pgvectorVersion = vM[1];
-  }
-  break; // all tarballs share the same version; just read the first
+// All tarballs of one release share the same versions, so the first asset
+// carrying both wins. A release whose names carry neither must fail here: a
+// manifest built from hardcoded defaults would publish the wrong runtime.
+const versioned = tarballs.find((t) => PG_RE.test(t.name) && VEC_RE.test(t.name));
+if (!versioned) {
+  console.error(
+    `Cannot read pg/pgvector versions from release asset name(s): ${tarballs.map((t) => t.name).join(', ')}`
+  );
+  process.exit(1);
 }
+const pgMajor = parseInt(PG_RE.exec(versioned.name)[1], 10);
+const pgMinor = parseInt(PG_RE.exec(versioned.name)[2], 10);
+const pgvectorVersion = VEC_RE.exec(versioned.name)[1];
 
 // ---------------------------------------------------------------------------
 // 3. Fetch sha256 sidecar content for each tarball
 // ---------------------------------------------------------------------------
 async function fetchSha256(sha256AssetName, _downloadUrl) {
-  // Try matching .sha256 sidecar from the asset list first
   const sidecar = assets.find((a) => a.name === sha256AssetName);
   if (!sidecar) {
     throw new Error(`Missing required checksum sidecar: ${sha256AssetName}`);

package/scripts/graph-parity.mjs

@@ -6,6 +6,7 @@ import { readFileSync, writeFileSync } from 'node:fs';
 import { resolve } from 'node:path';
 import { performance } from 'node:perf_hooks';
 import { pathToFileURL } from 'node:url';
+import { median, sortedFinite } from './lib/trace-stats.mjs';
 
 const USAGE = `usage: node scripts/graph-parity.mjs --old <binary> --new <binary> [--root <dir>] [--files <rel>...] [--json <out>] [--kind-map <path.json>] [--tokens] [--allow-new-languages <ids>] [--max-symbol-loss N] [--max-import-diff N] [--max-token-loss N] [--max-time-ratio 1.10] [--runs 3]
        node scripts/graph-parity.mjs --old-jsonl <file> --new-jsonl <file> [thresholds...]`;
@@ -18,6 +19,53 @@ export function normalizeRel(rel) {
   return String(rel || '').replace(/\\/g, '/');
 }
 
+/** Flags whose next argv entry is stored verbatim on the named option field. */
+const STRING_FLAG_FIELDS = new Map([
+  ['--old', 'old'],
+  ['--new', 'new'],
+  ['--root', 'root'],
+  ['--json', 'json'],
+  ['--old-jsonl', 'oldJsonl'],
+  ['--new-jsonl', 'newJsonl'],
+  ['--kind-map', 'kindMap'],
+]);
+
+/** Flags whose next argv entry is stored as a Number on the named option field. */
+const NUMBER_FLAG_FIELDS = new Map([
+  ['--max-symbol-loss', 'maxSymbolLoss'],
+  ['--max-import-diff', 'maxImportDiff'],
+  ['--max-token-loss', 'maxTokenLoss'],
+  ['--max-time-ratio', 'maxTimeRatio'],
+  ['--runs', 'runs'],
+]);
+
+/** Consume the consecutive non-flag argv entries that follow index `start`. */
+function takeTrailingValues(argv, start) {
+  const values = [];
+  let index = start;
+  while (index + 1 < argv.length && !String(argv[index + 1]).startsWith('--')) {
+    values.push(argv[index + 1]);
+    index += 1;
+  }
+  return { values, index };
+}
+
+/** Cross-flag mode requirements and numeric threshold ranges. */
+function validateParityOptions(out) {
+  const jsonlMode = Boolean(out.oldJsonl || out.newJsonl);
+  if (jsonlMode && (!out.oldJsonl || !out.newJsonl)) {
+    throw new Error('both --old-jsonl and --new-jsonl are required');
+  }
+  if (!jsonlMode && (!out.old || !out.new)) {
+    throw new Error('--old and --new binaries are required (or --old-jsonl/--new-jsonl)');
+  }
+  if (!Number.isFinite(out.maxSymbolLoss) || out.maxSymbolLoss < 0) throw new Error('invalid --max-symbol-loss');
+  if (!Number.isFinite(out.maxImportDiff) || out.maxImportDiff < 0) throw new Error('invalid --max-import-diff');
+  if (!Number.isFinite(out.maxTokenLoss) || out.maxTokenLoss < 0) throw new Error('invalid --max-token-loss');
+  if (!Number.isFinite(out.maxTimeRatio) || out.maxTimeRatio <= 0) throw new Error('invalid --max-time-ratio');
+  if (!Number.isFinite(out.runs) || out.runs < 1 || !Number.isInteger(out.runs)) throw new Error('invalid --runs');
+}
+
 export function parseArgs(argv) {
   const out = {
     old: null,
@@ -43,55 +91,19 @@ export function parseArgs(argv) {
   };
   for (let i = 0; i < argv.length; i += 1) {
     const a = argv[i];
+    const stringField = STRING_FLAG_FIELDS.get(a);
+    if (stringField) {
+      out[stringField] = take(argv, i, a);
+      i += 1;
+      continue;
+    }
+    const numberField = NUMBER_FLAG_FIELDS.get(a);
+    if (numberField) {
+      out[numberField] = Number(take(argv, i, a));
+      i += 1;
+      continue;
+    }
     switch (a) {
-      case '--old':
-        out.old = take(argv, i, a);
-        i += 1;
-        break;
-      case '--new':
-        out.new = take(argv, i, a);
-        i += 1;
-        break;
-      case '--root':
-        out.root = take(argv, i, a);
-        i += 1;
-        break;
-      case '--json':
-        out.json = take(argv, i, a);
-        i += 1;
-        break;
-      case '--old-jsonl':
-        out.oldJsonl = take(argv, i, a);
-        i += 1;
-        break;
-      case '--new-jsonl':
-        out.newJsonl = take(argv, i, a);
-        i += 1;
-        break;
-      case '--max-symbol-loss':
-        out.maxSymbolLoss = Number(take(argv, i, a));
-        i += 1;
-        break;
-      case '--max-import-diff':
-        out.maxImportDiff = Number(take(argv, i, a));
-        i += 1;
-        break;
-      case '--max-token-loss':
-        out.maxTokenLoss = Number(take(argv, i, a));
-        i += 1;
-        break;
-      case '--max-time-ratio':
-        out.maxTimeRatio = Number(take(argv, i, a));
-        i += 1;
-        break;
-      case '--runs':
-        out.runs = Number(take(argv, i, a));
-        i += 1;
-        break;
-      case '--kind-map':
-        out.kindMap = take(argv, i, a);
-        i += 1;
-        break;
       case '--tokens':
         out.tokens = true;
         break;
@@ -99,18 +111,17 @@ export function parseArgs(argv) {
         const first = take(argv, i, a);
         i += 1;
         out.allowNewLanguages.push(...splitLangIds(first));
-        while (i + 1 < argv.length && !String(argv[i + 1]).startsWith('--')) {
-          out.allowNewLanguages.push(...splitLangIds(argv[i + 1]));
-          i += 1;
-        }
+        const trailing = takeTrailingValues(argv, i);
+        for (const value of trailing.values) out.allowNewLanguages.push(...splitLangIds(value));
+        i = trailing.index;
         break;
       }
-      case '--files':
-        while (i + 1 < argv.length && !String(argv[i + 1]).startsWith('--')) {
-          out.files.push(argv[i + 1]);
-          i += 1;
-        }
+      case '--files': {
+        const trailing = takeTrailingValues(argv, i);
+        out.files.push(...trailing.values);
+        i = trailing.index;
         break;
+      }
       case '--help':
       case '-h':
         throw new Error('help');
@@ -118,18 +129,7 @@ export function parseArgs(argv) {
         throw new Error(`unknown argument: ${a}`);
     }
   }
-  const jsonlMode = Boolean(out.oldJsonl || out.newJsonl);
-  if (jsonlMode && (!out.oldJsonl || !out.newJsonl)) {
-    throw new Error('both --old-jsonl and --new-jsonl are required');
-  }
-  if (!jsonlMode && (!out.old || !out.new)) {
-    throw new Error('--old and --new binaries are required (or --old-jsonl/--new-jsonl)');
-  }
-  if (!Number.isFinite(out.maxSymbolLoss) || out.maxSymbolLoss < 0) throw new Error('invalid --max-symbol-loss');
-  if (!Number.isFinite(out.maxImportDiff) || out.maxImportDiff < 0) throw new Error('invalid --max-import-diff');
-  if (!Number.isFinite(out.maxTokenLoss) || out.maxTokenLoss < 0) throw new Error('invalid --max-token-loss');
-  if (!Number.isFinite(out.maxTimeRatio) || out.maxTimeRatio <= 0) throw new Error('invalid --max-time-ratio');
-  if (!Number.isFinite(out.runs) || out.runs < 1 || !Number.isInteger(out.runs)) throw new Error('invalid --runs');
+  validateParityOptions(out);
   out.allowNewLanguages = [...new Set(out.allowNewLanguages)];
   return out;
 }
@@ -184,11 +184,9 @@ export function parseLangsStdout(text) {
     }
   };
   const whole = tryParse(src);
-  if (whole && Object.keys(whole).length) return whole;
   if (whole) return whole;
   for (const line of src.split(/\n/)) {
     const parsed = tryParse(line.trim());
-    if (parsed && Object.keys(parsed).length) return parsed;
     if (parsed) return parsed;
   }
   return {};
@@ -230,13 +228,6 @@ function asStr(v) {
   return typeof v === 'string' ? v : '';
 }
 
-function median(values) {
-  const s = [...values].sort((a, b) => a - b);
-  if (!s.length) return 0;
-  const mid = Math.floor(s.length / 2);
-  return s.length % 2 ? s[mid] : (s[mid - 1] + s[mid]) / 2;
-}
-
 function normalizeSymbol(s) {
   return {
     name: String(s?.name ?? ''),
@@ -771,8 +762,9 @@ function formatExamples(examples) {
   return examples.map((ex) => `    - ${JSON.stringify(ex)}`).join('\n');
 }
 
-export function formatMarkdown(report) {
-  const lines = ['# mixdog-graph extraction parity', ''];
+/** Run inputs: compared binaries/root, file counts, language allow-list, kind-map source. */
+function formatRunInputLines(report) {
+  const lines = [];
   if (report.old) lines.push(`- old: \`${report.old}\``);
   if (report.new) lines.push(`- new: \`${report.new}\``);
   if (report.root) lines.push(`- root: \`${report.root}\``);
@@ -799,6 +791,12 @@ export function formatMarkdown(report) {
     lines.push('- kind-map: inactive');
   }
   if (report.tokens) lines.push('- tokens: on');
+  return lines;
+}
+
+/** Gate outcome: manifest parity, timing ratio, and the PASS/FAIL verdict. */
+function formatGateLines(report) {
+  const lines = [];
   if (report.manifestIdentical == null) lines.push('- manifest: (skipped)');
   else if (report.manifestIdentical) {
     lines.push(
@@ -822,7 +820,12 @@ export function formatMarkdown(report) {
   } else {
     lines.push('- result: **PASS**');
   }
-  lines.push('', '## Totals', '');
+  return lines;
+}
+
+/** Per-category totals table. */
+function formatTotalsLines(report) {
+  const lines = ['', '## Totals', ''];
   lines.push('| category | count |');
   lines.push('|---|---|');
   lines.push(`| LOSS | ${report.totals.loss} |`);
@@ -837,6 +840,12 @@ export function formatMarkdown(report) {
     lines.push(`| TOKEN_LOSS | ${report.totals.tokenLost || 0} |`);
     lines.push(`| TOKEN_ADD | ${report.totals.tokenAdded || 0} |`);
   }
+  return lines;
+}
+
+/** Optional sections that qualify the totals: unmapped kinds, additive fields, line moves. */
+function formatTotalsQualifierLines(report) {
+  const lines = [];
   if (report.unmappedKinds?.length) {
     lines.push('', '## Unmapped kinds', '');
     for (const item of report.unmappedKinds) {
@@ -862,7 +871,12 @@ export function formatMarkdown(report) {
       lines.push(`- ${item.rel}: \`${item.name}\``);
     }
   }
+  return lines;
+}
 
+/** One section per language with its non-empty diff buckets and examples. */
+function formatLanguageLines(report) {
+  const lines = [];
   const langs = Object.keys(report.byLanguage).sort();
   for (const lang of langs) {
     const b = report.byLanguage[lang];
@@ -881,7 +895,20 @@ export function formatMarkdown(report) {
       if (formatted) lines.push(formatted);
     }
   }
-  lines.push('');
+  return lines;
+}
+
+export function formatMarkdown(report) {
+  const lines = [
+    '# mixdog-graph extraction parity',
+    '',
+    ...formatRunInputLines(report),
+    ...formatGateLines(report),
+    ...formatTotalsLines(report),
+    ...formatTotalsQualifierLines(report),
+    ...formatLanguageLines(report),
+    '',
+  ];
   return lines.join('\n');
 }
 
@@ -985,7 +1012,7 @@ async function runTimedWalks(bin, root, runs) {
     times.push(result.ms);
     last = result;
   }
-  return { times, medianMs: median(times), stdout: last.stdout };
+  return { times, medianMs: median(sortedFinite(times)), stdout: last.stdout };
 }
 
 function kindMapError(message) {

package/scripts/lib/changed-tests.mjs

@@ -0,0 +1,104 @@
+// `--changed`: the test files whose relative references reach a file that
+// differs from HEAD (tracked edits and untracked files). The graph is read from
+// source text — `import … from`, `export … from`, `import()`, `require()` and
+// `new URL(…, import.meta.url)` with a './' or '../' path — so an asset a module
+// finds another way (a path joined at run time, a skill's markdown) is not an
+// edge; those changed files are reported back as unreached so the caller can
+// add a path filter for them.
+import { execFileSync } from 'node:child_process';
+import { existsSync, readFileSync, statSync } from 'node:fs';
+import { dirname, join, posix, relative } from 'node:path';
+
+// A module names what it loads by a relative path in four ways: a static or
+// re-exporting import, a dynamic import(), require(), and a file URL resolved
+// against import.meta.url (a spawned worker, a fixture script, a PowerShell source).
+const RELATIVE_IMPORT =
+  /(?:\bimport\s*(?:[^'"()]*?\bfrom\s*)?|\bexport\s+[^'"()]*?\bfrom\s*|\bimport\s*\(\s*|\brequire\s*\(\s*|\bnew\s+URL\s*\(\s*)['"](\.{1,2}\/[^'"]+)['"]/g;
+const SUFFIXES = ['', '.mjs', '.js', '.ts', '.tsx', '.mts', '.cjs', '/index.mjs', '/index.js', '/index.ts'];
+const SOURCE = /\.(?:mjs|cjs|js|ts|tsx|mts)$/;
+
+const toPosix = (path) => path.replaceAll('\\', '/');
+
+function gitLines(args, cwd) {
+  return execFileSync('git', args, { cwd, encoding: 'utf8' })
+    .split(/\r?\n/)
+    .map((line) => line.trim())
+    .filter(Boolean);
+}
+
+/** Paths relative to cwd that differ from HEAD, plus untracked ones. */
+export function changedFiles(cwd = process.cwd()) {
+  const tracked = gitLines(['diff', '--name-only', '--relative', 'HEAD'], cwd);
+  const untracked = gitLines(['ls-files', '--others', '--exclude-standard'], cwd);
+  return [...new Set([...tracked, ...untracked].map(toPosix))].sort();
+}
+
+function isFile(path) {
+  try {
+    return statSync(path).isFile();
+  } catch {
+    return false;
+  }
+}
+
+// The module a relative specifier names, relative to cwd, or '' when no file
+// answers it (a generated or missing module is simply not an edge).
+function resolveImport(cwd, fromFile, specifier) {
+  const base = join(cwd, dirname(fromFile), specifier);
+  for (const suffix of SUFFIXES) {
+    const candidate = `${base}${suffix}`;
+    if (isFile(candidate)) return toPosix(relative(cwd, candidate));
+  }
+  return '';
+}
+
+export function createImportGraph(cwd = process.cwd()) {
+  const edges = new Map();
+  return (file) => {
+    if (edges.has(file)) return edges.get(file);
+    let text = '';
+    if (SOURCE.test(file) && existsSync(join(cwd, file))) text = readFileSync(join(cwd, file), 'utf8');
+    const targets = new Set();
+    for (const match of text.matchAll(RELATIVE_IMPORT)) {
+      const target = resolveImport(cwd, file, match[1]);
+      if (target) targets.add(posix.normalize(target));
+    }
+    const list = [...targets];
+    edges.set(file, list);
+    return list;
+  };
+}
+
+/**
+ * The test files that reach a changed file through static imports, and the
+ * changed files no selected or unselected test reaches.
+ */
+export function selectChangedTests(testFiles, changed, cwd = process.cwd(), importsOf = createImportGraph(cwd)) {
+  const changedSet = new Set(changed.map(toPosix));
+  // Every module the tests import, with who imports it: reachability then runs
+  // backwards from the changed files, which stays exact through import cycles.
+  const seen = new Set();
+  const importers = new Map();
+  const stack = testFiles.map(toPosix);
+  while (stack.length) {
+    const file = stack.pop();
+    if (seen.has(file)) continue;
+    seen.add(file);
+    for (const target of importsOf(file)) {
+      if (!importers.has(target)) importers.set(target, []);
+      importers.get(target).push(file);
+      if (!seen.has(target)) stack.push(target);
+    }
+  }
+  const affected = new Set();
+  const queue = [...changedSet].filter((file) => seen.has(file));
+  while (queue.length) {
+    const file = queue.pop();
+    if (affected.has(file)) continue;
+    affected.add(file);
+    queue.push(...(importers.get(file) || []));
+  }
+  const selected = testFiles.filter((file) => affected.has(toPosix(file)));
+  const unreached = [...changedSet].filter((file) => !seen.has(file) && existsSync(join(cwd, file)));
+  return { selected, unreached };
+}